Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision Both sides next revision
devel:documentation:security:dev:authorization [2020/04/15 09:04]
tomiskar [Default settings of permissions for an identity profile]
devel:documentation:security:dev:authorization [2020/04/15 09:13]
tomiskar [Default settings of permissions for an identity profile]
Line 402: Line 402:
     * Users (IdmIdentity) | Change roles | **SubordinatesEvaluator**     * Users (IdmIdentity) | Change roles | **SubordinatesEvaluator**
     * Assigned roles (IdmIdentityRole) | - | **IdentityRoleByContractEvaluator**     * Assigned roles (IdmIdentityRole) | - | **IdentityRoleByContractEvaluator**
 +
 +<note tip>This configuration is available from version 10.3.0. If you are using some older version, then no permissions have to be removed and add one permission instead: 
 +  * Users (IdmIdentity) | Manage authorizations, View in select box (autocomplete), Read | **SubordinatesEvaluator**
 +
 +**With this setting manager will see even other contracts, which not manages** (=> all identity contracts) and can assign role to other contract. This is the reason, why new authorization policies and setting was introduced in version 10.3.0. 
 +</note>
  
 ==== Settings of permissions for the Helpdesk role ==== ==== Settings of permissions for the Helpdesk role ====
  • by koulaj